Struct Runtime 

pub struct Runtime {
    pub storage: Arc<dyn StorageBackend>,
    pub registry: Arc<SessionRegistry>,
    pub log_store: Arc<LogStore>,
    /* private fields */
}

Fields

storage: Arc<dyn StorageBackend>

registry: Arc<SessionRegistry>

log_store: Arc<LogStore>

Implementations

impl Runtime

pub fn new( storage: Arc<dyn StorageBackend>, registry: Arc<SessionRegistry>, log_store: Arc<LogStore>, ) -> Self

pub fn with_mode_registry( storage: Arc<dyn StorageBackend>, registry: Arc<SessionRegistry>, log_store: Arc<LogStore>, mode_registry: Arc<ModeRegistry>, ) -> Self

pub fn with_registries( storage: Arc<dyn StorageBackend>, registry: Arc<SessionRegistry>, log_store: Arc<LogStore>, mode_registry: Arc<ModeRegistry>, policy_registry: Arc<PolicyRegistry>, ) -> Self

pub fn registered_mode_names(&self) -> Vec<String>

Returns all mode names the runtime can handle (standards-track + extensions). Used by Initialize and GetManifest to advertise full capability.

pub fn standard_mode_descriptors(&self) -> Vec<ModeDescriptor>

Returns only standards-track mode descriptors for ListModes.

pub fn extension_mode_descriptors(&self) -> Vec<ModeDescriptor>

Returns only extension mode descriptors for ListExtModes.

pub fn register_extension( &self, descriptor: ModeDescriptor, ) -> Result<(), String>

pub fn unregister_extension(&self, mode: &str) -> Result<(), String>

pub fn promote_mode( &self, mode: &str, new_name: Option<&str>, ) -> Result<String, String>

pub fn subscribe_mode_changes(&self) -> Receiver<()>

pub fn mode_registry(&self) -> &Arc<ModeRegistry>

pub fn register_policy( &self, definition: PolicyDefinition, ) -> Result<(), String>

pub fn unregister_policy(&self, policy_id: &str) -> Result<(), String>

pub fn get_policy(&self, policy_id: &str) -> Option<PolicyDefinition>

pub fn list_policies(&self, mode_filter: Option<&str>) -> Vec<PolicyDefinition>

pub fn subscribe_policy_changes(&self) -> Receiver<()>

pub fn policy_registry(&self) -> &Arc<PolicyRegistry>

pub fn metrics(&self) -> &Arc<RuntimeMetrics>

pub fn subscribe_session_stream(&self, session_id: &str) -> Receiver<Envelope>

pub fn subscribe_signals(&self) -> Receiver<Envelope>

pub fn subscribe_session_lifecycle(&self) -> Receiver<SessionLifecycleEvent>

pub async fn get_session_envelopes_after( &self, session_id: &str, after_sequence: u64, ) -> Result<Vec<Envelope>, u64>

RFC-MACP-0006 §3.2: Replay accepted envelopes from the session log for passive subscribe, strictly after after_sequence (1-based accepted ordinal, exclusive; 0 = from the start). Err(base) when the requested range was discarded by log compaction — the caller must surface an explicit error, not silently skip missing history.

pub async fn process( &self, env: &Envelope, max_open_sessions: Option<usize>, ) -> Result<ProcessResult, MacpError>

pub async fn get_session_checked(&self, session_id: &str) -> Option<Session>

pub async fn cancel_session( &self, session_id: &str, reason: &str, cancelled_by: &str, ) -> Result<ProcessResult, MacpError>

Cancel a session. The cancelled_by parameter MUST be the authenticated sender of the CancelSession RPC (RFC-MACP-0001 Section 7.3: CancelSession is a Core control-plane message; mode authorization does not apply).

pub async fn suspend_session( &self, session_id: &str, reason: &str, suspended_by: &str, ) -> Result<ProcessResult, MacpError>

Suspend an Open session (RFC-MACP-0001 §7.5). Appends a SessionSuspend annotation, transitions Open -> Suspended, and emits a lifecycle event. The session’s TTL is banked and restored on resume.

pub async fn resume_session( &self, session_id: &str, reason: &str, resumed_by: &str, ) -> Result<ProcessResult, MacpError>

Resume a Suspended session (RFC-MACP-0001 §7.5), banking the suspended duration into the TTL deadline. If the MAX_SUSPEND_MS cap is exceeded, the session is force-expired instead.

pub async fn cleanup_expired_sessions(&self)

Expire all sessions that have exceeded their TTL. Called by the background cleanup task to proactively transition stale sessions without waiting for the next incoming message.

pub async fn gc_disk_sessions(&self, retention_secs: u64) -> usize

Delete terminal sessions’ durable data older than retention_secs (opt-in via MACP_SESSION_DISK_RETENTION_SECS). Before this existed, storage.delete_session had no callers at all: disk grew without bound and every restart reloaded every session ever completed. Enumerates STORAGE (not memory — eviction may already have dropped the registry entry), deletes the session’s snapshot+log, and clears any in-memory remnants. Returns the number of sessions deleted.

pub async fn evict_stale_sessions(&self, retention_secs: u64)

Evict resolved/expired sessions older than retention_secs from memory: the registry entry, the in-memory log cache, AND the stream broadcast channel (all three previously grew for the process lifetime; the log cache and stream bus were never evicted at all). Sessions remain queryable from durable storage after eviction.